> so doesn't the app have reasonable implicit permission to make use of the user's storage? “Implicit permission” does not sound like “free, informed, specific

> so doesn't the app have reasonable implicit permission to make use of the user's storage? “Implicit permission” does not sound like “free, informed, specific and unambiguous consent”. Furthermore, the directive (ePrivacy, article 5(3)) states that consent is valid only if the user was provided with clear information about the purposes of the processing beforehand. > does that include the app reading its own resource/assets data from its installed app-package/directory? An app reading its own data will fall under the “strictly necessary” exception of the directive (cf. ePrivacy 5(3)). Reading other databases will depend on the purpose.